Cyber Security Control Operations Analyst

Role Overview

The Cyber Security Control Operations Analyst is responsible for overseeing, handling, and optimizing security measures to protect systems, networks, and applications. The role emphasizes maintaining operational excellence through validation of control effectiveness, anomaly detection, and ensuring adherence to organizational as well as regulatory security standards.

Key Duties

• Set up, operate, and sustain cybersecurity controls across endpoints, networks, and cloud infrastructures.
• Manage tools aimed at identifying and blocking malware, ransomware, and unauthorized device access.
• Enforce Data Loss Prevention (DLP) policies and data classification practices, including encryption, labeling, and access restrictions compliance.
• Supervise and improve email filtering and web content controls to prevent phishing, spoofing, spam, and harmful traffic.
• Utilize threat intelligence platforms to spot abnormal activities and potential internal data extraction attempts.
• Evaluate external threat intelligence feeds, integrating insights into incident handling and security functions.
• Configure and supervise endpoint security measures to uphold a resilient cybersecurity posture.
• Conduct periodic scans, penetration tests, and deploy patches to detect and fix vulnerabilities in systems and applications.
• Produce reports on control efficacy, incident patterns, and keep thorough documentation of system configurations and audit logs.
• Collaborate with various teams to align security initiatives with business objectives and stay current with emerging cyber threats and best practices.

Qualifications and Experience

• Bachelor's degree in Cyber or Information Security, Computer Science, Information Technology, or related domains.
• Minimum of two years’ experience in cybersecurity or adjacent fields with significant technical security responsibilities.
• Preferred certifications include CompTIA Security+, CompTIA CySA+, (ISC)² SSCP, GIAC GSEC, or ISACA CCOA, or equivalents.
• Proficiency in configuring and monitoring endpoint protection, firewalls, and intrusion detection/prevention solutions to maintain cybersecurity standards.
• Ability to operate malware prevention, Security Information and Event Management (SIEM), and threat intelligence tools; interpret alerts; and manage incident escalation effectively.
• Experience applying DLP technologies, encryption protocols, and data classification to protect sensitive information under compliance requirements.
• Capable of performing vulnerability scans, penetration testing, and patch management with efficient prioritization within service level agreements.
• Familiarity with cloud security controls such as Identity and Access Management (IAM) and cloud monitoring, plus enhancements of email and web filters to counter phishing and other malicious exploits.